Windows Forum

Ask something
Discussion Locked

Removing users from local groups

0 helpful
3 replies

by packerdawg

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I need to be able to remove multiple domain users from all local groups on a member server. (results of reorganizations) Users still need access to other servers so their accounts have to stay. I am script challenged, so I need help to go that route. There are over 200 groups so going through everyone and comparing users manually is not perferred.

3 replies

by david.gruenewald

Use the addusers.exe from the resource kit to automate some of the process. You can also use it to get a dump of the DB from each server and import to work from. In the future use global groups and add them to local groups if necessary, that way when you remove the user from the global group, you have removed him from all local groups that the global group is a member of. Or do not use local groups at all.

by shanghai sam

I know the proper way apply permissions using groups. We are in a corporate environment where we do not have permission to create global groups on the domain where we are pulling user accounts from. I couldn't find any way to get addusers to remove users from groups if the user account was not on the local machine. It works fine when the account is local but not when pulling with the domain\username syntax. It comes back with illegal user name. Thanks for the try, sorry it didn't help.

This discussion is closed to new replies.